auth

May 12, 2025

Changes in this version

+ func ContextWithPrincipal(ctx context.Context, principal Principal) context.Context

+ func ContextWithToken(ctx context.Context, token string) context.Context

+ func NewAuthenticationHook(config AuthHookConfig) (hooks.BeforeHandleMessageHook, error)

+ func TokenFromContext(ctx context.Context) (string, bool)

+ type AllowAllPermissionChecker struct

+ func (c *AllowAllPermissionChecker) CheckPermission(ctx context.Context, principal Principal, method string, params interface{}) error

+ type AuthHookConfig struct

+ TokenHeader string

+ TokenPrefix string

+ Validator TokenValidator

+ type JWKSConfig struct

+ ClockSkew time.Duration

+ ExpectedAudience string

+ ExpectedIssuer string

+ JWKSURL string

+ RefreshInterval time.Duration

+ type JWKSTokenValidator struct

+ func NewJWKSTokenValidator(config JWKSConfig, client *http.Client) (*JWKSTokenValidator, error)

+ func (v *JWKSTokenValidator) ValidateToken(ctx context.Context, tokenString string) (Principal, error)

+ type PermissionChecker interface

+ CheckPermission func(ctx context.Context, principal Principal, method string, params interface{}) error

+ type Principal interface

+ GetClaims func() interface{}

+ GetSubject func() string

+ func PrincipalFromContext(ctx context.Context) (Principal, bool)

+ type TokenValidator interface

+ ValidateToken func(ctx context.Context, tokenString string) (Principal, error)